Known Vulnerabilities for Markdown by Python-markdown
Listed below are 1 of the newest known vulnerabilities associated with "Markdown" by "Python-markdown".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-123812 json | Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 1.8.7, the create_dynatrace_notebook registration... | Not Provided | 2026-11-09 | 2026-11-10 |
| CVE-2026-123515 json | Vikunja before 2.7.1 contains a client-side request forgery vulnerability that allows users with write access to make viewers... | Not Provided | 2026-11-08 | 2026-11-08 |
| CVE-2026-123311 json | In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was po... | Not Provided | 2026-11-06 | 2026-11-07 |
| CVE-2026-123309 json | In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown preview | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-121438 json | Mistune before 3.3.3 contains a denial of service vulnerability in InlineParser.parse_link that allows attackers to cause qua... | Not Provided | 2026-11-03 | 2026-11-07 |
| CVE-2026-121437 json | Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU throug... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-119712 json | PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows atta... | Not Provided | 2026-10-30 | 2026-11-05 |
| CVE-2026-118694 json | python-markdown2 through 2.5.5 contains a denial of service vulnerability that allows remote users to exhaust CPU by submitti... | Not Provided | 2026-10-28 | 2026-10-29 |
| CVE-2026-115354 json | Mistune before 3.3.0 contains a path traversal vulnerability in the opt-in Include directive that allows attackers to read lo... | Not Provided | 2026-10-22 | 2026-10-29 |
| CVE-2026-115353 json | Mistune before 3.3.0 contains a path traversal vulnerability in the RST include directive that allows attackers to read arbit... | Not Provided | 2026-10-22 | 2026-11-04 |